Everything You Need to Know

FinCEN’s Proposed
AML/CFT Overhaul

On April 7, 2026, FinCEN proposed the most significant reform to BSA/AML program requirements since the PATRIOT Act. We're tracking every development — from the comment period through final rulemaking and beyond — so you don't have to.

Comment Deadline
36 days
Plain Language Explainer

What FinCEN is actually proposing

Before you react to the headlines, here's what this rule does — and doesn’t — change.
On April 7, 2026, FinCEN published a Notice of Proposed Rulemaking (NPRM) to“fundamentally reform”how financial institutions design, build, and are evaluated on their AML/CFT programs under the Bank Secrecy Act.
The proposal replaces the current largely technical, checkbox-based compliance model with an effectiveness-based, risk-driven framework. The question shifts from “do you have these elements?” to “does your program actually work?”

On the same day, the FDIC, OCC, and NCUA issued a coordinated joint NPRM to align their respective BSA program requirements with FinCEN's proposed framework.

Important—this is a proposed rule.

This is an NPRM — not a final rule. Nothing is binding yet. Public comments are open throughJune 9, 2026. The final rule is expected in late 2026 or early 2027, with a 12-month implementation period after that. But the direction is clear — start assessing your gaps now.

What you need to know

Most significant BSA reform since the PATRIOT Act

The proposed rule rewrites the foundational program requirements that have governed AML compliance for decades — adding effectiveness standards, formal risk assessment requirements, and a new enforcement philosophy.

Coordinated across 4 regulators simultaneously

FinCEN, FDIC, OCC, and NCUA all published aligned proposals on April 7. This degree of interagency coordination is rare and signals strong regulatory consensus.

Focus shifts from “do you have it?” to “does it work?”

The rule introduces a new “effectiveness” standard — programs must be demonstrably effective, not just technically present. Risk assessment methodology, measurable outcomes, and program documentation all become exam artifacts.

Creates a clear incentive to use AI in compliance

By requiring measurable effectiveness and risk-based controls, the proposed rule rewards institutions that use AI and advanced technology to detect and triage illicit activity — not just those with the most analysts.

Upcoming Live Webinar

The Effectiveness Mandate: Making Sense of FinCEN's AML/CFT Program NPRM

Join our compliance and regulatory experts for a live breakdown of the proposed rule, what it means for your program, and how to prepare before the comment deadline.
Eric Ellis
SVP, Head of AML Risk Management,
Fifth Third Bank
Sarah Beth Felix
Founder & President,
Palmera Consulting
From Proposal to Compliance

What happens next —and when

This is a proposed rule. Here's the full journey from today's NPRM to when compliance would be required.
June 9, 2026

Comment Deadline

Public Comment Period Closes

All public comments must be received by June 9, 2026. This is your only opportunity to formally raise concerns about specific provisions.

Late 2026 / Q1 2027

Final Rule

Final Rule Expected — Approx. 6–9 Months Post-Comment

Based on FinCEN’s stated timeline and typical rulemaking cadence, the final rule is expected in late 2026 or early 2027.

~12 Months Post-Final

Estimated Compliance Date

Compliance Deadline — Programs Must Be Compliant

FinCEN has proposed a 12-month implementation period following issuance of the final rule. Institutions should begin gap assessments and program updates now.

Share Your Voice

Your comments
shape the final rule

FinCEN must respond to substantive comments received during the comment period. If your institution has concerns about specific provisions — now is the time to raise them formally.
Submit Comment

Read the proposed rule

Access the full NPRM on regulations.gov (Docket FINCEN-2026-0034) or start with FinCEN’s Key Changes summary document.

Identify your concerns

Review specific provisions against your institution’s current program. Common areas: effectiveness standard definition, safe harbor carve-outs, risk assessment methodology.

Coordinate with your trade group

ABA, CUNA, ACAMS, and other associations are coordinating industry comment letters. Joining a coordinated letter often has more impact.

Submit by June 9, 2026

Comments must be received — not just submitted — by June 9, 2026. File via regulations.gov using Docket No. FINCEN-2026-0034.

See Us In Action

Boost fraud prevention & AML compliance

Fraud can’t be guesswork. Invest in a platform that puts you back in control.
Get a Demo